SecuriteInfo[.]com[.]Win32[.]PWSX-gen[.]29509[.]18137[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

SecuriteInfo.com.Win32.PWSX-gen.29509.18137.exe
Size

52KB
MD5

223ab616ed36775939bc40ea5b38d81e
SHA1

9507b703c798f77fcb289156403037b5316375a0
SHA256

bb552cda9a74468e390ccc39c249850e936035e826bc1d3981475d7a3338695f
SHA512

e09756f9f908bffd939aee771c7f9b1d10cd385113f34c36134f5aa3cf332334dda0991181208932ea2369e4b9dbc9b0647f5bd568f2a77ba943ab7d64bceea2
SSDEEP

768:DC4hVOuFRRsuMwDzhuzSfUMtZIUSbY0EEgY2iV/UPHNKyWNe63cSHIdk:XzRpMwDzhpLfi+hdSoO

Score

N/A

Malware Config

Signatures

Files

SecuriteInfo.com.Win32.PWSX-gen.29509.18137.exe
.exe windows x86

7aab4377e170b09f6ce64a6276c35bcc

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

CreateStatusWindowW
ord17

kernel32

Wow64DisableWow64FsRedirection
Wow64RevertWow64FsRedirection
IsWow64Process
GetModuleHandleW
LCMapStringEx
HeapSize
CloseHandle
CreateFileW
GetStringTypeW
GetConsoleCP
WideCharToMultiByte
FlushFileBuffers
SetStdHandle
LoadLibraryW
OutputDebugStringW
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
LoadLibraryExW
TerminateProcess
FlsFree
FlsSetValue
FlsGetValue
CreateProcessW
VirtualAlloc
UnhandledExceptionFilter
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetTickCount64
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetCurrentThreadId
InterlockedIncrement
SetLastError
RtlUnwind
GetStartupInfoW
InitOnceExecuteOnce
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
GetFileType
SetFilePointerEx
SetFilePointer
ReadConsoleW
GetConsoleMode
LeaveCriticalSection
EnterCriticalSection
IsDebuggerPresent
GetModuleFileNameW
WriteFile
GetStdHandle
MultiByteToWideChar
GetProcAddress
GetModuleHandleExW
InterlockedDecrement
DecodePointer
EncodePointer
GetProcessHeap
IsProcessorFeaturePresent
SetEndOfFile
ReadFile
HeapReAlloc
HeapAlloc
HeapFree
SetUnhandledExceptionFilter
GetTickCount
GetExitCodeProcess
ExitProcess
GetCurrentProcess
Sleep
WaitForSingleObject
GetCommandLineW
WriteConsoleW
FlsAlloc
GetLastError

ole32

OleGetIconOfFile
HACCEL_UserUnmarshal
CreateDataCache
CreateStreamOnHGlobal
HMETAFILEPICT_UserMarshal
HPALETTE_UserMarshal
HENHMETAFILE_UserFree
StgOpenStorage
SNB_UserMarshal
HBRUSH_UserUnmarshal

winspool.drv

EnumPrintProcessorsW
DeletePrintProvidorW
FindClosePrinterChangeNotification
ord213
ClosePrinter

winmm

midiInAddBuffer
mmioStringToFOURCCW
midiInGetErrorTextA
mmioRead

setupapi

SetupInstallServicesFromInfSectionW
SetupDiSetDriverInstallParamsA

rtutils

RouterLogRegisterA
LogErrorA
TraceVprintfExA
TracePutsExW
TraceDumpExW
TraceDumpExA
MprSetupProtocolEnum
TraceGetConsoleW

user32

UpdateWindow
GetSubMenu
CheckMenuItem
DestroyMenu
LoadMenuW
GetSystemMetrics
TranslateAcceleratorW
LoadAcceleratorsW
RegisterClipboardFormatW
ShowWindow
CreateWindowExW
RegisterClassExW
PostMessageW
DispatchMessageW
TranslateMessage
GetMessageW
LoadStringW
GetParent
LoadIconW
LoadCursorW
LoadImageW

Sections

.text
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

7aab4377e170b09f6ce64a6276c35bcc

Headers

DLL Characteristics

File Characteristics

Imports

comctl32

kernel32

ole32

winspool.drv

winmm

setupapi

rtutils

user32

Sections

.text Size: 35KB - Virtual size: 35KB

.rdata Size: 11KB - Virtual size: 11KB

.data Size: 4KB - Virtual size: 12KB

.text
Size: 35KB - Virtual size: 35KB

.rdata
Size: 11KB - Virtual size: 11KB

.data
Size: 4KB - Virtual size: 12KB